Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/201D14B4CDBD11EFBC702B67762E951A.roa
File: 201D14B4CDBD11EFBC702B67762E951A.roa (raw, json)
Hash identifier: wFu4J4dAgzU0aB+CrnmwH0r0WURaTPBF4Kv5qOXLR70=
Subject key identifier: 93:F0:2F:5E:6C:3F:EA:E6:31:4F:DF:2B:02:1D:E5:15:2D:D2:1C:07
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 04E0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/201D14B4CDBD11EFBC702B67762E951A.roa
Signing time: Wed 08 Jan 2025 12:36:04 +0000
ROA not before: Wed 08 Jan 2025 12:36:00 +0000
ROA not after: Fri 09 Jan 2026 12:36:00 +0000
asID: 329007
IP address blocks: 102.135.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF
Validity
Not Before: Jan 8 12:36:00 2025 GMT
Not After : Jan 9 12:36:00 2026 GMT
Subject: CN=677e7134-71d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:2a:ab:65:6c:40:1a:a7:8f:4a:8a:77:60:
70:bb:e6:37:e1:dd:19:4d:11:2d:80:07:5d:ad:df:
77:ac:d8:33:5b:76:c8:99:68:7f:b6:40:42:8e:5e:
46:7e:35:47:4a:35:40:36:7f:01:0d:c6:b4:77:c8:
e8:43:00:d6:68:c9:de:42:8b:57:46:24:c6:e6:0e:
08:4d:b2:4e:0f:9c:61:28:c2:5e:46:1c:b8:4c:d4:
08:0d:15:84:ee:20:aa:16:55:c2:fd:74:20:b7:25:
b1:f1:a2:48:24:68:77:b1:27:9a:35:60:2c:a8:de:
14:25:d6:06:1e:c7:e9:8c:c9:bf:9a:71:90:b3:67:
5b:45:ab:fc:ea:31:b8:c9:49:7f:3b:66:cf:b9:09:
e4:03:47:04:69:e5:f2:69:26:bc:ef:cd:a1:63:bd:
bf:dc:30:b2:db:ca:fd:65:ff:41:6a:6e:ec:6c:48:
9e:a8:e2:50:bd:30:13:8f:24:a7:cc:ba:88:05:98:
7c:3a:37:dd:36:78:e7:ae:f3:80:4c:c1:3f:6d:71:
1e:cb:ed:5c:d1:b2:e6:6f:19:6b:92:8d:6f:ac:2c:
b2:3d:0e:29:ca:0e:75:0b:4f:30:0b:a4:79:a3:89:
66:c1:5d:cf:76:c3:e1:91:e9:04:04:d0:7d:44:2b:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F0:2F:5E:6C:3F:EA:E6:31:4F:DF:2B:02:1D:E5:15:2D:D2:1C:07
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/201D14B4CDBD11EFBC702B67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.4.0/22
Signature Algorithm: sha256WithRSAEncryption
09:65:3a:2b:47:b9:b9:d1:ca:ba:26:df:d5:9f:a3:47:40:43:
4e:0a:bb:96:dd:0b:15:62:cc:b2:85:9e:82:fa:58:35:cf:58:
52:f4:2a:7b:38:79:bd:0e:9a:7b:d0:dd:c6:79:91:e2:13:ce:
59:d6:7e:08:6f:64:b0:8b:59:3c:b0:2b:dc:00:62:d4:8a:ab:
8d:e3:60:1f:8f:44:be:15:f9:9c:17:03:c3:73:02:f6:fb:94:
f1:2d:b4:ed:ed:42:e6:4f:5c:85:0c:24:cd:4b:41:cd:df:9d:
d8:84:16:af:63:e2:04:25:04:c7:c9:9a:7f:d9:68:b5:78:51:
46:5e:b4:4b:bc:4a:38:3f:2f:a0:6a:46:95:40:b9:41:f1:aa:
23:cd:39:09:e7:d7:50:fd:53:a7:68:44:95:89:6c:98:de:7c:
ae:de:65:41:b3:59:e6:ec:3f:61:8e:60:23:d9:00:f2:d5:80:
66:55:4c:db:db:9b:11:ad:06:62:4f:ea:9c:32:3e:86:5a:02:
e5:7b:a1:cc:c5:ea:75:a7:98:e7:0d:92:a1:08:6e:e6:c7:ea:
7b:56:b8:22:7e:ec:0d:b0:64:e7:8d:8c:a7:fc:9b:f0:a3:0d:
0c:5c:e4:de:49:bc:3a:70:5e:37:36:35:37:10:e2:61:3b:4e:
20:4a:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:37 2025 by rpki-client